About this notice
Effective date: 29 September 2026. Last reviewed: 29 September 2026. Quotenivo is a hosted workspace for capturing enquiries, tracking external quote references and choosing a reviewed next action.
Peter French operates Quotenivo as an individual, not through a registered company. The privacy contact is Peter@peterfrench.dev. The service is offered for business use, including sole traders. This notice distinguishes Quotenivo's own account, service-operation and security records from customer/workspace data and is read with the Terms of service and, where Quotenivo processes customer personal data as a processor, the Data Processing Agreement.
Information the service may handle
- Account and workspace details: the identity-provider account used to sign in, workspace name, membership, role and configuration such as time zone.
- Enquiry and source data: source configuration, submission identifiers, bounded original enquiry JSON (including submitted fields or free text), confirmed fields and review/workflow state.
- Contact, quote and work data: name, email, phone, address or postcode, tenant-local customer links, external quote references or links, optional value or currency, status, next-action details and owner-recorded outcomes or reply observations.
- Approved outbound content: the recipient, approved customer-facing subject and body, content hash or version, approval actor/time/expiry, sender or Reply-To settings and delivery/provider evidence.
- Billing and subscription evidence: bounded Stripe customer, checkout, subscription and webhook/reconciliation references, plan and subscription status, amount/currency and relevant billing-period or cancellation timestamps. Payment-card details are entered on Stripe's hosted surface and are not stored by Quotenivo.
- Support, lifecycle and security records: support subject, message and notes, export/deletion jobs and artifacts, sessions, recovery digests, audit, quota, lifecycle tombstones and privacy-safe operational telemetry. Normal exports exclude token material by design.
These categories describe the information used by the current service. The applicable purpose, role, lawful basis and retention criteria are set out below and, for processor processing, in the Data Processing Agreement.
How the information is used
The intended current hosted purposes are to provide the account and workspace, receive and review an enquiry, keep tenant data separate, track an external quote reference and next action, prepare an owner-approved follow-up, provide the 14-day trial and (if enabled) recurring Pilot billing, cancellation and access-lifecycle flow, protect the service and respond to support or lifecycle requests.
Customer enquiry, quote, recipient and connected-mailbox data is used only to provide the service on the customer's documented instructions. Quotenivo does not use that data for its own marketing, product analytics, cross-customer benchmarking, sale or general-purpose AI training. Account, security, support and billing records that Quotenivo controls for its own service administration are handled separately for those limited purposes, without profiling or unrelated product analytics.
Human approval is the default for customer-facing follow-up. A missing field, changed record, known reply, suppression, disconnected capability or uncertain delivery result should stop or pause the applicable action. Quotenivo does not fetch or rewrite an external quote document, and this page does not claim live Microsoft email or Google Workspace search, reply detection or delivery authority.
Roles and lawful bases
For account, security, support and billing administration, Peter/Quotenivo is the controller for its own limited records. For a customer's enquiries, contacts, quote references, recipients, approved follow-up and connected-mailbox workflow, the customer business decides why the data is used and Quotenivo processes it only on the customer's documented instructions where the law treats Quotenivo as a processor. A technical tenant boundary does not decide the legal role.
The working bases for Quotenivo's own records are contract or steps requested before contract for account/service administration, legitimate interests for proportionate security and support, and legal obligation where a specific law requires a record. The customer business must decide the basis for its own enquiry, recipient and electronic-marketing processing. OAuth permission authorises a provider connection but is not, on its own, the lawful basis for every application purpose.
Mailbox capability and roadmap
Quotenivo is preparing one authorised Microsoft email mailbox connection per workspace for the launch pilot. The supported Microsoft account families are Outlook.com, Hotmail, MSN and Microsoft 365. Google Workspace is planned for a later release and is not available for connection yet. The current hosted implementation has no live mailbox-synchronisation evidence, so no provider should be treated as active until this deployment passes its hosted validation.
If the separately gated Microsoft email pilot path is later enabled after owner and provider review, it is intended to use provider/account metadata, requested or granted scopes, connection health, protected credentials and minimum active-workflow metadata; it is not intended to mirror a full inbox or retain mailbox message bodies by default.
That design boundary does not mean Quotenivo stores no message content at all: the current hosted workflow can retain bounded original enquiry JSON, approved outbound subject/body and support free text as described above. Provider mailbox data remains subject to separate review for roles, scopes, revocation, transfers and retention.
Sensitive information
Do not intentionally submit special-category data or criminal-offence data in an enquiry, quote workflow or connected mailbox. If such information is received accidentally, stop using it for the workflow, restrict access and contact Quotenivo promptly so the customer can assess the incident and any required safeguards. A separate documented instruction, lawful basis, safeguards and assessment are required before this service processes such data intentionally.
Hosted and provider services
Quotenivo account sign-in uses its configured Auth0 identity flow; mailbox authorisation is a separate provider action. The application runs through its configured Cloudflare Worker, D1 database and Queue services. Stripe is the hosted checkout and billing-management service when paid billing is enabled; Quotenivo receives only bounded billing references and verified webhook evidence, and payment-card details remain on Stripe's hosted surface. Google Workspace is not used as the Quotenivo sign-in method.
These providers may use their own subprocessors or process data outside the UK. Account-specific provider contracts, subprocessors, locations, retention settings and transfer safeguards for the enabled and conditional provider services are still being finalised for the protected release; this notice does not claim that review is complete. Conditional mailbox, outbound and paid-billing provider activation remains held until the relevant evidence is recorded. The customer-facing provider schedule is included in the Data Processing Agreement where Quotenivo is acting as processor. No provider approval or compliance certification is claimed.
Owner controls and requests
Workspace owners can request an export, request workspace deletion and record a structured privacy request through the current hosted workflow. The privacy centre records scope and status metadata for controlled review; it does not automatically grant access, correct records or complete a deletion. Mailbox disconnect/reconnect behavior belongs to the separately gated design and should not be read as evidence that a live mailbox is connected.
Individuals can contact Peter@peterfrench.dev to ask about access, correction, deletion, restriction, objection or portability. Identity and authority will be checked proportionately, and a customer-controlled end-customer request may need to be routed to that customer business. Exact retention periods, deletion exceptions, backup expiry and provider-side deletion follow the applicable DPA, provider schedule and operational evidence; this notice states the governing criteria and will be updated when those settings materially change. The current support route is not by itself a complete legal rights response.
Retention and international transfers
Quotenivo retains each category only for the purpose for which it was collected and for as long as that purpose, a customer instruction, a legal obligation, security needs, an active suppression, a dispute or a protected backup cycle requires. Customer workspace data follows the customer's documented retention and deletion instructions and the applicable DPA. Account, billing, support and security records follow the shorter period needed for those own-record purposes. Exports expire after their stated download window; credentials are invalidated when a connection is disconnected or the workspace is closed, subject to protected security evidence.
Some providers or support personnel may process data outside the UK. Quotenivo will use an applicable UK transfer mechanism and supplementary safeguards where required before enabling the relevant provider feature. The enabled-provider schedule and customer DPA identify the relevant service boundary; Quotenivo does not promise UK-only or EEA-only storage.
Cookies and storage technologies
Quotenivo uses essential browser storage and cookies for sign-in sessions, security and request protection. It does not rely on advertising cookies or non-essential analytics for the current service. If that changes, the notice and any required consent choices will be updated before the new technology is used.
Rights and complaints
Depending on the applicable role and legal basis, a person may have rights to access, correction, deletion, restriction, objection and data portability. Requests should not include passwords, mailbox tokens or full message contents. We will verify identity and respond without undue delay and within the applicable statutory period, subject to lawful clarification, extension and exemption rules.
Concerns can be raised with the UK supervisory authority, the Information Commissioner's Office. This page does not remove a person's right to complain or to use another legally available remedy.
Automation and human review
Quotenivo does not intend to make solely automated decisions that produce legal or similarly significant effects about a person. Follow-up content is reviewed and approved by the workspace owner, and safety checks can pause an action when a reply, opt-out, suppression, changed record or uncertain provider result is found. Any future AI or provider feature that changes this position requires a separate purpose, risk and notice review.
Security boundary
Quotenivo is designed with server-side session and tenant checks, protected provider credentials, privacy-safe operational records and no standing platform-operator impersonation path. These are product controls, not a promise of perfect security or a certification.
Do not send passwords, mailbox tokens or full message contents through support. Use the authenticated support flow and the reference shown by the service.
Contact and updates
Privacy contact: Peter French, operating Quotenivo — Peter@peterfrench.dev.
Postal service address: 1 Mountain View, Caergybi, Ynys Môn, LL65 2RT. We will publish a new version if the purposes, enabled providers, mailbox scope, retention or rights process materially changes. The version and effective date above identify the notice that applied when information was collected.